https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:32:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06069 bdu:2022-06069 https://cve.radiocsirt.org/vuln/bdu:2022-06069 https://cve.radiocsirt.org/vuln/certfr-2022-ale-009 certfr-2022-ale-009 https://cve.radiocsirt.org/vuln/certfr-2022-ale-009 https://cve.radiocsirt.org/vuln/certfr-2022-avi-902 certfr-2022-avi-902 https://cve.radiocsirt.org/vuln/certfr-2022-avi-902 https://cve.radiocsirt.org/vuln/cnvd-2022-67488 cnvd-2022-67488 https://cve.radiocsirt.org/vuln/cnvd-2022-67488 https://cve.radiocsirt.org/vuln/euvd-2026-365976 EUVD-2026-365976 https://cve.radiocsirt.org/vuln/euvd-2026-365976 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41352 <p>An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.</p> <p>An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41352 https://cve.radiocsirt.org/vuln/ghsa-85q4-vgvj-3q28 <p>An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavisd via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavisd automatically prefers it over cpio.</p> <p>An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavisd via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavisd automatically prefers it over cpio.</p> https://cve.radiocsirt.org/vuln/ghsa-85q4-vgvj-3q28 https://cve.radiocsirt.org/vuln/gsd-2022-41352 gsd-2022-41352 https://cve.radiocsirt.org/vuln/gsd-2022-41352